#032 · Security ProfessionalsEpicLocked in

Ivan Ristić

Author of ModSecurity and SSL Labs

Grading the internet’s TLS, one hostname at a time

Rating

86Impact score
Technical depth92
Defensive craft95
Research86
Influence88
FromCroatia / UK
Era2002–present

Domains

TLSWeb application firewallsMeasurement

Scouting report

Wrote ModSecurity, the open-source web application firewall that became the reference implementation and the base of the OWASP Core Rule Set. Then built SSL Labs, whose A-to-F grade for a server’s TLS configuration turned an obscure ops detail into something executives asked about, and wrote Bulletproof TLS and PKI as the manual for fixing the grade.

Curator’s note

Made bad TLS visible and embarrassing, which fixed more of it than any RFC.

Sources